[security-dev] PicketLink 3 - Group/Role - Membership

I haven't spent too much time digging into the query side yet so
hopefully a quick question.
For a given user is it possible to run a query that returns a list of
all of their groups/roles?
For a given role/group is it possible to run a query to identify all of
the members?
Regards,
Darran Lofthouse.